Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: QAXtCxu8Lb2/Az6NCwB+5PUxLAdFy5tq8SsKcpZJ+FE=
Subject key identifier: 49:0B:02:78:45:29:33:E7:5E:1C:21:03:60:7F:C4:73:37:B7:03:8E
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 01A0EA09A86BF42901A94711A4ED19D6062C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 09C8
Signing time: Mon 28 Sep 2026 22:01:36 +0000
Manifest this update: Mon 28 Sep 2026 22:01:36 +0000
Manifest next update: Tue 29 Sep 2026 22:01:36 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: 6E6ueJdSOOrF+8TpgW6XK6izbbdP68LwDYSqP6LQ8NI=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:a8:6b:f4:29:01:a9:47:11:a4:ed:19:d6:06:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Sep 28 22:01:36 2026 GMT
Not After : Sep 29 22:01:36 2026 GMT
Subject: CN=490b0278452933e75e1c2103607fc47337b7038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:e5:8f:f7:e5:38:f8:75:11:8e:7a:83:81:
5b:99:aa:ba:c1:13:37:00:52:79:cd:71:39:cf:ef:
85:78:f0:c7:9f:4b:3a:e1:ea:77:74:f6:18:9c:36:
62:f8:60:b0:9f:c1:07:b4:c6:24:0f:c0:16:a3:44:
dc:6a:5e:1b:46:55:50:13:aa:a0:c8:9a:1f:a3:e8:
68:86:2e:35:ac:57:32:15:55:35:d2:aa:c9:b1:80:
32:dc:9b:54:09:2b:d2:72:71:66:71:1a:6a:9e:a7:
78:1d:ae:20:dd:a5:6b:97:9b:07:a9:5d:a0:18:5b:
58:74:09:d6:06:91:5d:d3:22:65:5b:93:57:da:99:
e9:be:67:b6:0c:55:65:09:bc:7e:8e:1f:1d:f3:ae:
09:99:ac:6f:d6:4f:73:d6:16:ec:0a:10:ef:76:34:
d5:56:f4:32:a8:cd:5d:f3:c1:17:e7:4b:15:5a:3a:
3b:e7:e5:fa:6a:7f:55:70:19:5e:a6:df:41:6a:c7:
f0:38:f5:23:7d:d8:78:3a:f3:0a:2d:cb:60:b0:4c:
cd:f5:9e:15:a4:16:4f:08:9f:1b:53:f0:c2:2c:7d:
63:be:5d:4b:03:4a:bc:41:b8:b6:59:75:f2:a6:17:
78:4e:cc:22:f8:97:73:6a:7f:0d:6f:07:fa:92:8b:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:02:78:45:29:33:E7:5E:1C:21:03:60:7F:C4:73:37:B7:03:8E
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:be:7f:60:0b:c4:68:e7:34:dd:dd:14:17:b4:f4:fc:83:4e:
6e:2d:98:b5:54:e7:b0:46:88:9b:a3:a2:8a:70:69:f3:17:77:
3b:e4:f3:7c:e7:d3:30:c4:18:09:1c:3e:a8:c5:57:c7:0a:dd:
e1:8a:97:f6:14:69:38:88:6d:ab:91:d2:5b:26:eb:c2:99:23:
3d:cc:e3:c9:79:a0:49:8d:20:7b:46:87:2f:8a:7f:cf:a1:d5:
b1:ff:83:8b:a5:8a:64:c8:d1:c0:55:fe:8c:0b:83:a7:fb:6f:
0c:f7:99:2f:2c:75:4b:81:53:84:fc:b2:b0:62:09:f1:6d:76:
8d:22:0c:16:29:6b:72:6e:ee:fb:2f:9b:fe:62:69:1a:8d:a8:
33:2e:c3:cf:3b:46:37:79:20:80:d5:1c:48:ef:e7:07:1c:ce:
fb:a8:15:8f:cb:c9:b2:a9:9f:db:9c:75:0a:9b:38:f9:61:ba:
a5:55:4e:03:16:dd:27:2c:3c:76:de:89:24:df:44:f9:67:7a:
35:66:a0:93:49:0e:d0:59:33:c7:93:2c:90:63:37:e0:19:cf:
63:25:51:cd:f7:c9:7d:bf:99:8b:40:c8:19:41:58:f5:19:95:
0f:83:f3:05:df:53:37:90:3a:90:3b:11:64:76:77:15:5e:7d:
f7:73:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:21:22 2026 by rpki-client